Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: osljFikD5UfVNZ/CFSaf3ZzjRsweJU1hLsin/aZaJUc=
Subject key identifier: 71:08:0A:5B:0B:02:C8:73:1D:70:9A:87:FE:A3:81:A6:A4:CA:72:22
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 0199FFC8947F6676126A518DB9BFAF04AEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:39 +0000
Manifest this update: Mon 20 Oct 2025 04:02:39 +0000
Manifest next update: Tue 21 Oct 2025 04:02:39 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: KuvsSwVPXAwNApQWmI/EKtz0bQxm6cPuQHouqZJbfrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:94:7f:66:76:12:6a:51:8d:b9:bf:af:04:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Oct 20 04:02:39 2025 GMT
Not After : Oct 21 04:02:39 2025 GMT
Subject: CN=71080a5b0b02c8731d709a87fea381a6a4ca7222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:02:e9:9e:76:2d:55:6b:3d:13:cc:1d:7d:
d8:c2:3c:f9:23:3e:c2:cc:88:c1:56:d2:e5:ef:4a:
05:98:c3:b3:f3:f6:8f:e4:3e:e2:0c:5a:4a:b0:89:
b8:2f:49:01:02:b9:98:ed:fd:08:8d:7b:53:04:31:
c3:08:27:96:7f:ca:e5:5b:87:26:a7:8b:03:bf:0e:
a6:f7:0b:39:ec:79:6f:6f:74:26:0f:3e:eb:bf:ed:
38:f1:f5:ca:59:f4:53:b0:d9:a7:2e:9e:4c:35:e6:
73:b5:65:17:ab:49:14:84:72:fa:75:5e:fc:c5:ff:
2f:4e:30:ed:5a:84:24:51:f3:0b:49:1b:ee:88:8a:
2a:7f:ca:3c:68:71:ce:3f:77:24:9c:1b:6c:e9:39:
17:39:ed:75:54:65:13:33:8f:de:90:24:35:41:19:
09:3f:7e:40:00:24:f2:35:59:fd:fe:3a:50:f5:a5:
a2:ac:72:81:54:83:ac:89:f3:83:d8:ca:06:de:90:
68:95:6e:7e:7d:6c:9a:5f:7d:a4:ff:7d:63:0a:06:
a2:29:a2:72:89:a7:d4:ff:1a:32:2b:2b:82:43:1a:
65:92:45:19:b5:56:5e:7f:8c:31:be:44:98:d5:e3:
b9:87:fb:d9:78:3e:77:53:05:e0:62:4b:83:b9:1e:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:0A:5B:0B:02:C8:73:1D:70:9A:87:FE:A3:81:A6:A4:CA:72:22
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:9a:7f:b8:2f:4e:63:f4:55:60:ae:52:eb:3e:e2:1e:72:
f7:75:82:4d:d5:73:b8:3b:44:1a:11:d2:31:5e:64:ea:1e:0f:
57:fc:90:50:dc:26:81:0f:ae:a8:72:c7:12:f9:55:40:2c:9f:
ff:98:41:c3:79:ea:ed:9f:24:51:6e:7e:b7:c9:85:f5:2c:38:
39:bc:a1:87:90:0c:8e:9a:c5:73:28:90:5c:43:59:45:38:4e:
8f:9b:c0:83:c5:e5:c3:0e:01:35:7d:f7:a4:31:f6:cc:94:b0:
a3:b8:30:44:2e:18:c1:f0:ec:d7:c9:a0:f0:b7:f2:c9:f5:8e:
83:40:a4:9a:10:21:f8:c6:38:12:ab:96:b1:32:bd:26:89:1c:
46:c8:f2:50:a3:d1:64:36:69:fc:92:92:6a:18:76:e0:97:b0:
49:35:7f:38:16:d4:9b:fc:73:53:d6:a1:03:9d:97:12:4d:48:
2a:91:49:db:4e:fc:e3:f7:fb:5f:3e:c3:cc:55:a9:63:ff:f8:
b3:57:ad:79:ae:99:65:cc:be:b0:52:47:1a:7b:5f:87:30:20:
3a:ce:89:3a:af:10:9d:9c:b5:27:7d:a6:9e:b3:b0:a8:43:27:
02:2e:1c:c9:07:b2:9d:d1:7a:ff:03:2b:bd:f7:30:27:c2:92:
39:8a:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:33 2025 by rpki-client